feat(tekton): add Tekton toolset with pipeline and task management by ksimon1 · Pull Request #892 · containers/kubernetes-mcp-server

ksimon1 · 2026-03-06T10:40:11Z

Summary

This PR introduces a new tekton toolset to kubernetes-mcp-server, exposing domain-specific Tekton operations that go beyond what the generic core toolset's resources_* tools provide. This functionality is required for new Kubevirt functionality.

Toolset (`pkg/toolsets/tekton`)

5 tools are exposed:

Tool	Description
`tekton_pipeline_start`	Start a Pipeline by creating a PipelineRun
`tekton_pipelinerun_restart`	Restart a PipelineRun with the same spec
`tekton_task_start`	Start a Task by creating a TaskRun
`tekton_taskrun_restart`	Restart a TaskRun with the same spec
`tekton_taskrun_logs`	Fetch logs from a TaskRun's underlying pod

The tekton_pipeline_start and tekton_task_start tools accept an optional params argument — a JSON object where values can be strings, arrays of strings, or objects (map of string to string), matching all three Tekton ParamType variants.

Generic CRUD operations (list, get, create, update, delete) for Tekton resources remain available via the core toolset's resources_* tools using apiVersion: tekton.dev/v1.

Eval tasks (`evals/tasks/tekton`)

9 declarative eval tasks validated against a live OpenShift cluster (9/9 passed, 27/27 assertions):

create-tekton-pipeline, create-tekton-task
get-tekton-pipeline, list-tekton-pipelines, list-tekton-pipelineruns
delete-tekton-pipelinerun, restart-tekton-pipelinerun
start-tekton-pipeline, start-tekton-task

Setup scripts handle a known OpenShift Pipelines quirk: the Tekton Results operator adds results.tekton.dev/taskrun finalizers to TaskRuns, which can block namespace termination between tasks. The scripts actively remove these finalizers to ensure clean teardown.

The tekton suite is registered in both claude-code and openai-agent eval configurations.

Test plan

Unit tests: go test ./pkg/toolsets/tekton/... — all pass
Snapshot tests: go test ./pkg/mcp/... — all pass
Eval tests: 9/9 tasks passed on a live OpenShift cluster with OpenShift Pipelines installed

ksimon1 · 2026-03-06T10:40:32Z

/hold Need reviews from tekton people

waveywaves · 2026-03-06T14:24:41Z

README.md

  - **Uninstall** a Helm release in the current or provided namespace.
+- **🔧 Tekton**: Tekton-specific operations that complement generic Kubernetes resource management.
+  - **Pipeline**: Start a Tekton Pipeline by creating a PipelineRun.
+  - **PipelineRun**: Restart a PipelineRun with the same spec, or bulk-delete PipelineRuns with selectors.


This PR does not have bulk-delete implemented, maybe a missed commit ?

Many actions can be done with general tools which are already implemented in this MCP server. If you think we will need some special delete function, then we can add it 👍

Maybe we can start here with an eval task to see if it is needed?

@Cali0707 I created new PR #917

waveywaves · 2026-03-06T14:35:46Z

pkg/toolsets/tekton/taskrun.go

+	}
+
+	logs := ""
+	for _, step := range tr.Status.Steps {


we should get logs for sidecars as well

waveywaves · 2026-03-06T14:50:28Z

README.md

+
+<summary>tekton</summary>
+
+> **Note**: Generic CRUD operations (list, get, create, update, delete) for Tekton resources (Pipeline, PipelineRun, Task, TaskRun) are available via the `core` toolset's `resources_list`, `resources_get`, `resources_create_or_update`, and `resources_delete` tools using `apiVersion: tekton.dev/v1`.


https://github.com/containers/kubernetes-mcp-server/blob/main/pkg/toolsets/core/resources.go#L115

don't think resources_delete supports bulk deletion using label selectors

matzew · 2026-03-12T11:09:04Z

pkg/toolsets/tekton/tekton_test.go

+	"github.com/containers/kubernetes-mcp-server/pkg/toolsets/tekton"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)


test should be grouped via testify/suite, like:

type TektonSuite struct { suite.Suite }

ksimon1 · 2026-03-12T11:35:53Z

/hold #917 should be merged first

vdemeester · 2026-03-17T16:37:04Z

pkg/toolsets/tekton/taskrun.go

+		req := params.KubernetesClient.CoreV1().Pods(namespace).GetLogs(tr.Status.PodName, &corev1.PodLogOptions{
+			Container: step.Container,
+		})
+		stream, err := req.Stream(params.Context)


io.ReadAll reads without bound. A chatty step could return hundreds of MB, hitting LLM context limits or OOMing the server.

Suggest capping per step:

const maxStepLogBytes = 1 << 20 // 1 MB per step bytes, err := io.ReadAll(io.LimitReader(stream, maxStepLogBytes))

I didn't look at how it is done directly in the kubernetes mcp server though, but we could re-use code/way of doing.

pkg/toolsets/tekton/taskrun.go

pkg/toolsets/tekton/client.go

manusa · 2026-03-18T13:29:46Z

#917 was merged, I think we need to rebase this one now.

ksimon1 · 2026-03-19T16:56:22Z

@manusa the PR is rebased

manusa · 2026-03-20T14:19:38Z

/run-mcpchecker tekton

github-actions · 2026-03-20T14:27:23Z

mcpchecker MCP Evaluation Results

Commit: 55db285
Summary: 4/9 tasks passed (44.4%)

Metric	Result
Tasks Passed	4/9
Assertions Passed	15/27
Overall	❌ Failed

View full results

ksimon1 · 2026-03-26T07:54:20Z

/run-mcpchecker tekton

manusa · 2026-03-26T11:41:32Z

/run-mcpchecker tekton

github-actions · 2026-03-26T11:49:05Z

mcpchecker MCP Evaluation Results

Commit: 55db285
Summary: 9/9 tasks passed (100.0%)

Metric	Result
Tasks Passed	9/9
Assertions Passed	27/27
Overall	✅ Passed

View full results

pkg/toolsets/tekton/tekton_test.go

pkg/toolsets/tekton/client.go

manusa · 2026-03-26T11:59:49Z

pkg/toolsets/tekton/taskrun.go

+	req := params.CoreV1().Pods(namespace).GetLogs(podName, &corev1.PodLogOptions{
+		Container: container,
+	})
+	stream, err := req.Stream(params.Context)


The log stream should be closed with defer immediately after the error check:

stream, err := req.Stream(params.Context) if err != nil { fmt.Fprintf(sb, "[%s: %s] error retrieving logs: %v\n", kind, name, err) return } defer stream.Close()

Currently stream.Close() is called manually after io.ReadAll (line 167), but if ReadAll panics the stream leaks. Using defer is the standard Go idiom and is safer.

pkg/toolsets/tekton/taskrun.go

manusa

Impressive results 🎉 ✅

I've added a few comments for your consideration

waveywaves · 2026-03-31T12:12:40Z

@ksimon1 can you check why the build is failing on this one ?

ksimon1 · 2026-04-02T07:43:01Z

@manusa, @Cali0707, @waveywaves, @vdemeester can you please review this PR?

manusa

LGTM, thx!

nader-ziada

@ksimon1 great work, but one small comment:

When adding a new toolset, you also need to update internal/tools/update-readme/main.go to include the import:

_ "github.com/containers/kubernetes-mcp-server/pkg/toolsets/tekton"

so you can then run make update-readme-tools to regenerate the toolsets tables in README.md and docs/configuration.md.

the new tekton tool set will require its packages. This commit add the tekton pipelines package Code was assisted by Cursor AI. Signed-off-by: Karel Simon <ksimon@redhat.com>

Introduces a new `tekton` toolset exposing 5 domain-specific tools: - tekton_pipeline_start: start a Pipeline (with optional typed params) - tekton_pipelinerun_restart: restart an existing PipelineRun - tekton_task_start: start a Task (with optional typed params) - tekton_taskrun_restart: restart an existing TaskRun - tekton_taskrun_logs: fetch logs from a TaskRun's underlying pod Generic CRUD operations for Tekton resources remain available via the core toolset's resources_* tools. The params argument on start tools supports string, array, and object Tekton parameter types. Includes unit tests, snapshot tests, and README documentation. Code was assisted by Cursor AI. Signed-off-by: Karel Simon <ksimon@redhat.com>

ksimon1 · 2026-04-07T08:16:58Z

@nader-ziada it should be fixed now

nader-ziada · 2026-04-07T14:13:22Z

@nader-ziada it should be fixed now

thanks @ksimon1

LGTM

waveywaves reviewed Mar 6, 2026

View reviewed changes

waveywaves suggested changes Mar 6, 2026

View reviewed changes

ksimon1 force-pushed the tekton-pipelines branch from 3f6be06 to 77551d2 Compare March 10, 2026 09:12

matzew reviewed Mar 12, 2026

View reviewed changes

waveywaves mentioned this pull request Mar 13, 2026

feat(tekton): add Tekton Pipelines eval tasks #917

Merged

vdemeester reviewed Mar 17, 2026

View reviewed changes

ksimon1 force-pushed the tekton-pipelines branch from 77551d2 to 0d002a3 Compare March 19, 2026 16:45

ksimon1 force-pushed the tekton-pipelines branch 2 times, most recently from 8c4d0f2 to 55db285 Compare March 20, 2026 05:35

ksimon1 mentioned this pull request Mar 24, 2026

fix(evals): enable core toolset for tekton eval suite #959

Merged

manusa reviewed Mar 26, 2026

View reviewed changes

pkg/toolsets/tekton/tekton_test.go Show resolved Hide resolved

manusa reviewed Mar 26, 2026

View reviewed changes

pkg/toolsets/tekton/client.go Outdated Show resolved Hide resolved

manusa reviewed Mar 26, 2026

View reviewed changes

pkg/toolsets/tekton/taskrun.go Show resolved Hide resolved

manusa requested changes Mar 26, 2026

View reviewed changes

ksimon1 force-pushed the tekton-pipelines branch from 55db285 to 46651f6 Compare March 27, 2026 12:51

github-actions bot added the toolset/tekton label Mar 27, 2026

ksimon1 force-pushed the tekton-pipelines branch from 46651f6 to f012e51 Compare March 31, 2026 12:19

manusa approved these changes Apr 2, 2026

View reviewed changes

manusa added this to the 0.1.0 milestone Apr 2, 2026

manusa requested review from Cali0707 and nader-ziada April 2, 2026 13:55

nader-ziada reviewed Apr 2, 2026

View reviewed changes

ksimon1 added 2 commits April 7, 2026 09:51

feat: add tekton into go dependencies

d88a1db

the new tekton tool set will require its packages. This commit add the tekton pipelines package Code was assisted by Cursor AI. Signed-off-by: Karel Simon <ksimon@redhat.com>

ksimon1 force-pushed the tekton-pipelines branch from f012e51 to 24a48c1 Compare April 7, 2026 08:15

nader-ziada merged commit 39442fb into containers:main Apr 7, 2026
9 checks passed


		<summary>tekton</summary>

		> Note: Generic CRUD operations (list, get, create, update, delete) for Tekton resources (Pipeline, PipelineRun, Task, TaskRun) are available via the `core` toolset's `resources_list`, `resources_get`, `resources_create_or_update`, and `resources_delete` tools using `apiVersion: tekton.dev/v1`.

Conversation

ksimon1 commented Mar 6, 2026 • edited by manusa Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Toolset (pkg/toolsets/tekton)

Eval tasks (evals/tasks/tekton)

Test plan

Uh oh!

ksimon1 commented Mar 6, 2026

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

ksimon1 commented Mar 12, 2026

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

manusa commented Mar 18, 2026

Uh oh!

ksimon1 commented Mar 19, 2026

Uh oh!

manusa commented Mar 20, 2026

Uh oh!

github-actions bot commented Mar 20, 2026

mcpchecker MCP Evaluation Results

Uh oh!

ksimon1 commented Mar 26, 2026

Uh oh!

manusa commented Mar 26, 2026

Uh oh!

github-actions bot commented Mar 26, 2026

mcpchecker MCP Evaluation Results

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

manusa left a comment

Choose a reason for hiding this comment

Uh oh!

waveywaves commented Mar 31, 2026

Uh oh!

ksimon1 commented Apr 2, 2026

Uh oh!

manusa left a comment

Choose a reason for hiding this comment

Uh oh!

nader-ziada left a comment

Choose a reason for hiding this comment

Uh oh!

ksimon1 commented Apr 7, 2026

Uh oh!

nader-ziada commented Apr 7, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

ksimon1 commented Mar 6, 2026 •

edited by manusa

Loading

Toolset (`pkg/toolsets/tekton`)

Eval tasks (`evals/tasks/tekton`)